Forum Discussion

RubenJZ's avatar
RubenJZ
Copper Contributor
Aug 10, 2022
Solved

KQL - Convert one object with different key value pairs to a list

Hi!

 

I have the following KQL:

 

tableName
| where TimeGenerated > ago(1h)
| project-rename State=State_s, Status=Status_s, startTime=startTime_t, itemsFailed=itemsFailed_d, itemsProcessed=itemsProcessed_d, name=name_s, durationInSec=durationInSec_d
| project TimeGenerated, Status, startTime, State,itemsFailed,itemsProcessed, durationInSec, name
| where itemsProcessed != 0
| summarize AvgItemsProccessed = round(avg(itemsProcessed)),
MinItemsProccessed = round(min(itemsProcessed)),
MaxItemsProccessed = round(max(itemsProcessed))

 

It returns:

 

 

How can I have a list instead?

 

I would like to get something like:

AvgItemsProcessed 17,369

MinItemsProcessed 16,900

MaxItemsProcessed 17,861

 

I experiented with make_list, mv_expand but with no luck.

 

Thanks in advance!

 

Ruben

2 Replies

  • wernerzirkel's avatar
    wernerzirkel
    Brass Contributor
    just add one more line to your code:
    | evaluate narrow()
    • RubenJZ's avatar
      RubenJZ
      Copper Contributor

      hi wernerzirkel 

       

      that work as expected! 🙂

       

      Thank you very much! - You made my day 🙂

Resources